Messages

136

Virtual private networks / Re: Reliably restart OpenVPN service via CLI

« on: November 11, 2024, 10:42:13 am »

Somehow this is odd because we always preset devices. Maybe this is the down/up issue again?

# /sbin/ifconfig ovpns2 down
# /usr/local/sbin/pluginctl -s openvpn restart 2

Does this work?


Cheers,
Franco

137

Virtual private networks / Re: Reliably restart OpenVPN service via CLI

« on: November 11, 2024, 10:14:05 am »

No not remove the interface manually.

# /usr/local/sbin/pluginctl -S openvpn

Lists the enabled OpenVPN services including their ID.

Use the right ID for

# /usr/local/sbin/pluginctl -s openvpn restart YOURIDHERE

If restart is not working you're looking at a bigger issue maybe..


Cheers,
Franco

138

24.7 Production Series / Re: Dashboard not loading in several browsers

« on: November 10, 2024, 10:25:45 am »

Browser development console shows JS errors. The widgets have a handler to push the actual JS error to the console for each failed widget.


Cheers,
Franco

139

24.1 Legacy Series / Re: Cannot upgrade past 24.1.10

« on: November 10, 2024, 10:24:38 am »

Certainly not funny picking a post that has no response to a problem asked and answered at least two dozen times.


Cheers,
Franco

140

Hardware and Performance / Re: Realtek Nic is not detect by OPnsense

« on: November 09, 2024, 10:08:23 am »

> The legend says

Well, actually, we pioneered the use of the Realtek vendor driver.

https://github.com/opnsense/changelog/blob/ef4dbe52c3fe620c333f78791b0eae22539ac99e/community/17.1/17.1.2#L5-L10

Things changed over time of course. RTL8125 is covered by the os-realtek-re plugin nowadays.


Cheers,
Franco

141

Zenarmor (Sensei) / Re: Deep Disappointment with Zenarmor's Commitment

« on: November 09, 2024, 09:12:11 am »

Yuk (And I say that in a very positive way, Franco  )

Well, we got the discussion rolling. That's s a good thing. Thanks to all!


Cheers,
Franco

142

24.1 Legacy Series / Re: Kea DHCP IPv6?

« on: November 08, 2024, 03:03:06 pm »

Yes, sure.


Cheers,
Franco

143

24.7 Production Series / Re: 24.10 BE upgrade CRL errors

« on: November 08, 2024, 03:01:47 pm »

Also added https://github.com/opnsense/core/commit/a86c7106ed to verify proxy.conf was added properly and it was (as documented). The only caveat is that configd needs to be restarted when adding/editing/removing the file.

# service configd restart
# configctl configd environment


Cheers,
Franco

144

24.7 Production Series / Re: 24.10 BE upgrade CRL errors

« on: November 08, 2024, 02:47:49 pm »

I tested and it indeed uses both vars no matter what case the environment var was in (even mixed works). Leads me to believe there may have been a typo in the original ones? Or the environment setup is not correct in configd (misses one?).

145

24.7 Production Series / Re: 24.10 BE upgrade CRL errors

« on: November 08, 2024, 02:29:54 pm »

Ok probably have to see why the lowercase is better but we did look at the Python code and it said:

https://tedboy.github.io/python_stdlib/_modules/urllib.html#getproxies_environment

146

24.7 Production Series / Re: opnsense-version vs net-snmpd vs librenms

« on: November 08, 2024, 02:06:32 pm »

Happy to, I have a few more for net-snmpd / lldpd waiting in the wings too! The question I guess is, do any changes that have been made in the last 5 years now rely on the new default output of the command?

Looking forward to it, thanks!

147

24.7 Production Series / Re: opnsense-version vs net-snmpd vs librenms

« on: November 08, 2024, 02:05:52 pm »

PR: Just for historic context LibreSSL and i386 went away eliminating the need to spew out redundant information here. These days aarch64 is a bit more prevalent so it makes sense to go half a step backwards.

148

24.7 Production Series / Re: opnsense-version vs net-snmpd vs librenms

« on: November 08, 2024, 02:04:21 pm »

Interesting. We can flip back to "version (arch)" if that's what it wants. Up for another PR?


Cheers,
Franco

149

24.7 Production Series / Re: 24.10 BE upgrade CRL errors

« on: November 08, 2024, 01:49:39 pm »

Going back to the old situation is relatively easy without interfering with operation:

# rm /usr/local/share/certs/ca-crl-upd-* /tmp/libfetch_crl.*

And check for updates again. The new libfetch_crl file should have enough diagnostics to hint at the issue.

Just making sure this is 24.10_7 from updates and not a fresh install 24.10?

Have you set both HTTP_PROXY and HTTPS_PROXY in the configd template? And if you add the lower case ones it starts working or still doesn't?


Cheers,
Franco

150

24.7 Production Series / Re: Dashboard not loading in several browsers

« on: November 08, 2024, 12:42:01 pm »

Huh? Session expired eventually? Browser console errors would be nice to see.


Cheers,
Franco